Extracted

• • Target

    7793174fb7c92bd83094d8b761aa4c02_JaffaCakes118

  • Size

    481KB

  • MD5

    7793174fb7c92bd83094d8b761aa4c02

  • SHA1

    cdf1567ac05a382e62d75d616b95d5c6f579fdd5

  • SHA256

    ff0629fc3ec2dbde6ff1c2f09c003ecf45baca32ade99df2a5ee68b0dad05937

  • SHA512

    96223bda8c28f052acd14e6651d043ffe9b5ddde4a23ba1a818cf830eff4808926f606179552c74e3f150b94c6d62405d9fa210f6464ab9f1345210c9e2ce4e6

  • SSDEEP

    6144:gEGX7kt4/iLBrpd1NpFHXSFL8XfSZGvCst/vlJ5Odq61uEkgw:Qvk1NpFCFYPAGlt/8kJ

  Score

  10^/10

  latentbotdiscoverypersistencetrojanupx

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence
  behavioral1behavioral2